Wireshark offers a comprehensive framework for analyzing network traffic, and it performs well on most
operating systems, and the interface is streamlined with shortcuts and methods to make navigation easier
and get you up and running with analyzing traffic.
And in this lecture we will discover how the Wireshark presents information along with where to find
a list of keyboard shortcuts.
And we will also take a look at the many authors who have been who have made this application possible
and describe some ways you can obtain help and learn about Wireshark.
So let's start with a brief look at the Wireshark interface.
So let's first start Wireshark.
You can also start Wireshark from Terminal without just typing Wire, Wireshark, and you can also start
with a pseudo credentials.
But in this case we will just start it with a normal wireshark without sudo or anything for now.
And in some cases you will need, uh, you will need to start mashrakh with sudo privileges.
And now when you first launch Wireshark, you will see a list of active interfaces and some have a spark
line or moving graph symbol next to the interface here.
And when present, the spark line represents actively exchanging data and you can select that interface
and begin capturing.
And here, as you can see, our arrow is down, our analysis is down here.
So whenever we enter some website here, let's actually coliforms.
And here, as you can see, it spiked up.
So as shown here, this is our both Ethernet.
Also select any.
In this case we don't have connected Bluetooth or any wireless devices.
So now during analysis, Wireshark has many ways to improve your experience.
So first let's actually select firstly Ethernet and then we will start here.
As you can see, it's empty.
So whenever we go here, let's actually go to Nethunter and as you can see it.
It's actually very it works actually very fast and real time data on your screen here.
So it might look like.
Pretty.
Is arranged, but it's actually it arranged in some way, which I will explain all of this in this section.
So now, for example, when working with a package capture with Wireshark, we can easily add columns
to the interface.
So simply right click on a value with the packet details here and now.
You can also apply.
Apply as filter.
Prepare as filter.
Mark Unworked Protocol Preferences Decode.
Show packet new info here.
As you can see, there is a also we can also edit resize contents and resize column width and here apply
as filter.
So.
Now we will select something here and.
And see here.
We can also select a num number at that column and so on.
We can also change the title of it.
So number.
And so on.
So, which also includes intelligent scrollbar, which is on the right side of the packet list here.
You can also go to view and here we can expand all view, reset layout, colorize conversations, resize
column reset layout.
We.
Receptor layout kernels packet in a new window.
And as you can see here, the new window just popped out and we can see more information.
Now.
And here.
We can also type our display filters, which you will learn all of this.
This horse.
And now.
We'll start with how to discover keyboard shortcuts in Wireshark.
So with millions of downloads per year, Russia has become a significant tool.
It has proven to be flexible as an open source utility and encourages developers to add functionality
as well as improve overall experience.
So each new version improves the application, and improvements can include fixing a simple visual or
display usually or more significant problems that can cause an application to crash, such as sulfur
detectors.
So when you update Wireshark, take time to read the notes, which will see.
You can also see here where just Google it var.
Wireshark.
OBS, Wireshark, update notes.
And here there's also.
Uh, you can see the what's new bug fixes new and updated features like a new protocol support.
Updated protocol support new and updated capture file support.
And you can also get help from that.
So first, let's actually solve this capture, and we will.
Again.
Uh, explaining.
It's not working.
So we can rule out.
No.
Stan.
As you can see, there's a release notes on Wireshark's official Web page.
As you can see, the last version of this 4.0.5.
And here what's new in what's new section, you can see bug fixes, file locations, getting Wireshark
and so on.
So let's get started.
Fastly with the let's get started with discovering the keyboard shortcuts.
Right?
So everyone has a preferences as how they interact with Wireshark's.
Some individuals prefer using keyboard as it's faster and more intuitive and using a mouse like that.
So Wireshark has a list of keyboard shortcuts that can be found by selecting from the this Help menu
choice, then clicking about Wireshark and then selecting keyboard shortcuts here and see in the tab
here.
So now we are seeing every shortcut, every possible shortcut in Wireshark.
So for example, when working with a package capture, many times I will select, as you can see, control
plus plus, which will zoom in on the main text of the interface.
Let's try that actually click.
Okay, let's zoom in that here.
I'll sit here and zoom in.
Zoom out like that.
Zoom in.
Please zoom in now.
Here.
It's.
We can barely see it.
That's because I will zoom.
Again.
Yes.
Actually check.
Check that.
Shortcut shortcuts again.
And here, zoom in.
Zoom out.
Zoom in and zoom out here.
So now.
We will.
To and zoom in.
Unfortunately, it's actually close that wireshark and open the wireshark.
Again, we have some shortcut problem here.
Then zero.
And here we let's go to some website.
And here we are seeing that again.
I guess my plus keyboard plus key on my keyboard is broken.
So we will use that.
We will.
You can also change that here.
Oops.
Uh, not here.
You should change this from the file and no edit preferences.
And here you can change that font and columns layout captcha, expert filter buttons, name resolutions.
You can also change the protocols.
You can give them individual colors to know exactly what protocol is it or not.
And you can see the statics advanced and so on.
So.
Yes.
I use my laptop's keyboard to hear and see if we can zoom in and zoom out.
And now.
All of these improvements over the years have been possible because of the generosity of the open source
community.
And here you can see keyboard shortcuts, plug ins, that these are the default plugins.
As of this lecture, I didn't installed any plugins for you.
If we would need any plugins we will install on this lecture.
So.
Now let's firstly recognize our authors, right?
Who developed this?
This awesome application.
So these are the many authors have contributed to the success of the Wireshark by providing ongoing
development and maintenance of the application.
So some constituent, some consistently jump in to add their expertise and others contribute only when
they need a specific protocol Dissector.
So anyone can be involved as there is a plenty of documentation on how to add a basic dissector.
If you do modify Wireshark to edit the sector or visual enhancement for your work with the Wireshark
team so that everyone can benefit.
So now let's find information here across the bottom of the right hand side of the Wireshark.
So.
Welcome interface you will see learn label.
So firstly, of course we need to first quit and let's go to wireshark's.
Welcome screen right and here.
We have profile Bluetooth classic here.
Let's select classic actually click hold for you here now.
Now we're going to understand the phases of packet analysis.